Opens in a new tab

Category: Security Controls

  • March 24, 2026
    Network segmentation, firewalls, load balancers, and gateways have been implemented and are actively managed to maintain and enforce secure system…
  • March 24, 2026
    Timely identification, reporting, and remediation (patching) of known software and firmware vulnerabilities following NIST standards. Employing and regularly updating anti-malware…
  • March 24, 2026
    Identifying, generating, and logging critical events (e.g., login attempts, configuration changes). Encrypting and restricting access to log data at rest and in transit.…
  • March 24, 2026
    Requiring strong password complexity, length, and Multi-Factor Authentication (MFA). Ensuring each user and system component has a unique, non-shared identifier.…
  • March 24, 2026
    Automatically terminating user sessions after a defined period of inactivity. There is a documented approval process whereby authorized parties create…